CVE-2012-3234: realnetworks realplayer Numeric Errors
Vulnerability summary
CVE-2012-3234 is a high (CVSS 7.5) Numeric Errors vulnerability in realnetworks realplayer. EPSS estimates a 1.31% chance of exploitation in the next 30 days, higher than 70.6% of scored vulnerabilities.
Not severe (CVSS 7.5, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Timeline
- 12-09-2012PublishedVulnerability first disclosed.
- 06-08-2024Last modifiedVulnerability information updated.
Description
RealNetworks RealPlayer before 15.0.6.14, RealPlayer SP 1.0 through 1.1.5, and Mac RealPlayer before 12.0.1.1750 do not properly handle codec frame sizes in RealAudio files, which allows remote attackers to cause a denial of service (divide-by-zero error and application crash) or possibly have unspecified other impact via a crafted file.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.31%
Chance of exploitation in the next 30 days
Percentile
71%
Versus all other CVEs
30-day change
No change 0.00 pp
From 1.31% on 04-10-2026
Known exploited
Compare KEV catalogsNot in the CISA KEV catalog.
Not in the ENISA CNW catalog.
Not in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication (CVSS vector). Other conditions: not stated in public data.
Realnetworks2 products
- realplayer≤ 15.0.5.109 | 2.1.2 | 2.1.3 | 2.1.4 | 4 | 5 | 6 | 7 | 8 | 10.0 | 10.5 | 11.0 | 11.0.1 | 11.0.2 | 11.0.2.1744 | 11.0.2.2315 | 11.0.3 | 11.0.4 | 11.0.5 | 11.1 | 11.1.3 | 11_build_6.0.14.748 | 12.0.0.1444 | 12.0.0.1548 | 14.0.0 | 14.0.1 | 14.0.1.609 | 14.0.2 | 14.0.3 | 14.0.4 | 14.0.5 | 15.0.2.72 | 15.0.3.37 | 12.0.0.1701
- realplayer_sp1.0.0 | 1.0.1 | 1.0.2 | 1.0.5 | 1.1 | 1.1.1 | 1.1.2 | 1.1.3 | 1.1.4 | 1.1.5
1 vendor · 2 products